I. General information
- What is m-Token Postbank?
m-Token Postbank is a mobile application for smartphones. The application ensure strong customer authentication and payment confirmation in a secure way. m-Token Postbank performs two-factor authentication of the user and builds a dynamic link between the authorization method and each specific transaction, which meets the regulatory requirements of the updated PSD2 Directive.
- What do I need to use m-Token Postbank?
To use the m-Token Postbank software token, you need to have a smartphone with iOS 8+ or Android 4.4.4+ and internet access. You can download it from the App Store or Google Play, respectively, depending on your operating system.
- How do I activate m-Token Postbank?
You can activate m-Token Postbank through your e-Postbank Internet banking profile. After loggin into e-Postbank, select Security menu >> Token Management.
In order to activate token and to confirm your payments we need to have your actual data – mobile phone number and email address.
In case you want to request change of your data you should visit the nearest bank office, find a convenient branch here.
1. Select the button Request a Token. After selection the button, you will receive two activation codes – code 1 through sms or automatic voice call and code 2 through an email. These codes are sent to your mobile phone and email address provided to the Bank.
2. Install the m-Token Postbank app on your smartphone from Google Play or the App store.
3. Enter the codes which you have received by sms and email in the appropriate fields.
4. Create a 6-digit PIN to access the application.
After successful login, in Settings menu >> Biometrics, you can set a fingerprint or face recognition (for iOS) for easy login to the app.
Important! After the token registration, all payment transactions will be confirmed with the issued token in the future (the token replaces your current authentication method digital certificate or QES).
- How Many Tokens Can I Have?
Each user can have only one software token, which is used to confirm transfers in all his e-Postbank profiles (in case there are more than one) and online card transactions. The token will be automatically added to all profiles.
- How many tokens can have on one device?
Only one software token per device.
- What should I do if I change my smartphone?
You do not need to deactivate the token if you change your device. For your convenience, there is an option in the Settings menu in the app to migrate the token from one to another device. Select Settings menu, after that Migrate token, the system requires a confirmation to for migration. After confirming that you want the token to be migrated to another device, the activation codes and QR code will appear on the screen. You have to enter the codes or to scan QR code in order to activate token to a new device.
- I have more than one profile (company and a personal account). Will the software token be active for all of my profiles?
Yes. The software token will be active for all profiles you have. Once you activate a software token, it will be automatically registered in all of your accounts.
- Can I use the application on my smart watch?
No. You need a smartphone to use m-Token Postbank.
- Can I install the application on my personal laptop/computer?
No. The application works on smartphones with Android or iOS.
After the migration, the token will only work on the new device.
II. Confirmation of payment transactions
- What kind of operation need confirmation with token?
As of September 14, 2019, all payment through Internet banking, except payments between own accounts and to own credit cards, have to be confirmed by m-Token.
- How I will confirm the payments with m-Token?
When you create a new transfer via e-Postbank, the system will require confirmation of payment with m-Token Postbank.
You will receive a push notification on your mobile phone (on which the m-Token is installed). The notice contains payment details and can be confirmed or declined. You could confirm of decline a payment in the app.
- I didn’t receive push notifications. What can I do?
You need to check if the app notifications are enabled. You can check the settings in Settings Menu >> Applications on your mobile phone. Then find m-Token Postbank app and in the App Settings section >> Notifications you need to enable app notifications.
- How do I confirm a payment if I do not receive a push notification?
In case you do not receive Push notifications for any reason, you can confirm your translations by scanning the QR code. Once you've created the e-Postbank translation, select the "QR Code Authorization" option. In the m-Token Postbank application, select the QR Code Authorization menu and scan the code. Confirm the payment after making sure the details are correct.
- Can I confirm more than one payment at a time?
Yes. You can confirm more than one payment with both a Push notification and a QR code.
Select the payments you want to confirm. Depending on the number of payments, you will see either details on each payment on the m-Token Postbank screen, or information about the first and the last recipient’s IBAN of the selected payments, the total number and the total amount of transfers (if the number of payments is lagre).
After confirmation in m-Token Postbank, payments should be sent via e-Postbank via the Send button.
I have already activated m-Token Postbank but I still cannot order transfers:
- If you are registered online for the e-Postbank service, you need to visit a branch of Postbank in order to access the full version of the service. After changing the registration you will be able to order transfers online.
- If you are registered for the service with passive rights you will not be able to make payments to third parties. You should request a right change at a Postbank branch.
If company have two or more users who authorize payments, who will receive push notifications for payment confirmation.
The user who creates the payment and select button “Sign” will receive a push notification. Other users who need to sign, as in the current functionality, must log in to their profiles, in the Transfers menu, tab Current or Pending, and have to select “Sign”. After selecting the Sign button, the user will receive a notification and will be able to confirm or decline the payment at m-Token Postbank application.
- What is the meaning of the control number when I confirm mass/payroll payment?
The control number is a calculated (SHA256) code that allows you to verify the batch payment file.
At your screen, you can see the first 5 and last 5 symbols of the hash code. When you confirm the file through m-Token, you have to check that these characters match on both screens (e-Postbank and m-Token Postbank). In case the numbers are different do not confirm the execution of the file!
- How to make transfers through the m-Postbank mobile application?
In order to be able to make transfers through m-Postbank, you need to trust your mobile device through Certificate or QES.
III. Functionalities and technical issues related to m-Token Postbank
- What should I do if I forget my PIN for access m-Token Postbank?
To set up a new access PIN, you need to clear the cache and application data on Android devices, or reinstall the application if you're using iOS.
Clear Android cache and data:
Enter Settings Menu >> Applications on your mobile phone. Then find the m-Token Postbank and in the Usage section >> you need to select Clear Cache and Clear Data.
Important notice! After cleaning cache and application data or re-installing, you need to activate the token again. To do so, you must request new activation codes from the your e-Postbank profile >>Security menu>> Token Management. After successfully activation of the new token, you will be able to create a new PIN.
- What should I do if I forget my PIN to access m-Token Postbank but I have already enabled access with biometric data?
In that case, you can continue to log in with already configured biometric data. To recover your PIN you need to follow the steps above (activate a new token).
- How do I deactivate m-Token Postbank?
You can deactivate the software token in two ways:
Using your e-Postbank account, Security menu >> Token management>>Delete;
Through the application m-Token Postbank, Settings menu >> Deactivate token.